Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

blog.google

Post reply on HN
Print view View original

41–50 of 420 posts

Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

#41

Post by solardev »

muppetman wrote: post #38
solardev wrote: post #6

Earlier quoted context omitted.

...and saving email at the same time. It's totally unusable without spam filters, and the open models/blacklists don't come anywhere close to Gmail's capabilities.

"open models/blacklists don't come anywhere close to Gmail's capabilities" I disagree with you. I use Postfix with rspamd plugged into it for my personal email account. I get way more spam to my gmail than I do to my personal account, and I sign up to everything with my personal account. rspam also dkim signs my emails when I send them etc, verifies SPF/DKIM/DMARC on recipet etc. Now to counter that - I am a TINY mai…

FWIW, this would make a great blog post (or Show HN) with details!

"I run my own mail server and get better spam results than Gmail"

Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

#42

Post by EvanAnderson »

nwienert wrote: post #37
EvanAnderson wrote: post #34

Hijacking the thread: I do some "bulk" sending for a 501(c)3 I volunteer for. I include unsubscribe links that go to a form with a submit button (because I want the unsubscribe to be a POST request). Each link has a random opaque identifier in the query string. Something like: hxxp://example.com/unsubscribe?id=abcd1234 A couple years ago I noticed that MSFT IPs hitting my unsubscribe links with invalid identifiers on…

I thought it was part of CAN SPAM that you can’t require a second action and that was why the big email sending providers moved to that.

So many email security systems preemptively access every URL in messages. I found that I receive a GET for virtually every unsubscribe URL I send out.

I don't read clicking a "confirm" button as a second action. The attorney didn't either. He also said CAN SPAN doesn't apply to a 501(c)3. I still try to comply to be a good citizen.

Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

#43

Post by j45 »

albertgoeswoof wrote: post #26

This might be good news, but as it comes from Google and involves email centralisation, I’m sceptical. At MailPace we already enforce DKIM, it’s pretty basic stuff. But list-unsubscribe is optional for our senders. We can make this a requirement and manage lists for senders who don’t / can’t implement a webhook to handle it (we already default to blocking resends to emails that hard bounce). However I am curious how…

I'm wondering if they see enough gmail traffic receiving such an email that maybe they can infer how much funny business might be going on?

Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

#44

Post by joering2 »

tiffanyh wrote: post #8

> "Gmail’s AI-powered defenses stop more than 99.9% of spam, phishing and malware from reaching inboxes and block nearly 15 billion unwanted emails every day." This will be a pain for legit use cases but will net to a better place for the ecosystem. Much like strong KYB/KYC for bulk text messaging.

You joking right? The amount of text messages spam I receive now on Verizon, and some 8 months ago before on T-mobile is staggering.

Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

#45

Post by amluto »

pixl97 wrote: post #15
amluto wrote: post #10

Earlier quoted context omitted.

Also: > So today, we’re introducing new requirements for bulk senders — those who send more than 5,000 messages to Gmail addresses in one day If you run an email server for personal use, you are quite unlikely to send more than 5k messages per day.

Heh, I see someone has never had an automation script go bad.

That one time I spammed myself egregiously, I would have appreciated a 5k/day limit.

Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

#46

Post by kevincox »

overstay8930 wrote: post #17

Doesn't matter to me, if an email doesn't have a one click unsubscribe I just mark it as spam. Messes with their email reputation so they hopefully get kicked off of reputable email services.

I do exactly the same. I give them one chance to let me unsubscribe. If it is more than 2 or 3 clicks I give up and mark as spam. If they keep sending I mark as spam.

Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

#47

Post by justinator »

KeepFlying wrote: post #40
nwienert wrote: post #37

Earlier quoted context omitted.

I thought it was part of CAN SPAM that you can’t require a second action and that was why the big email sending providers moved to that.

Probably true but how do you handle autodetonation of email links in that case? Too many emails servers will click links automatically to check for issues. That was my understanding at least.

Unsubscribe link goes to a page that has a form that's automatically submitted via JavaScript. Disable that for the first 5 minutes of that link's life to get around automated things.

Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

#48

Post by jabroni_salad »

nwienert wrote: post #37
EvanAnderson wrote: post #34

Hijacking the thread: I do some "bulk" sending for a 501(c)3 I volunteer for. I include unsubscribe links that go to a form with a submit button (because I want the unsubscribe to be a POST request). Each link has a random opaque identifier in the query string. Something like: hxxp://example.com/unsubscribe?id=abcd1234 A couple years ago I noticed that MSFT IPs hitting my unsubscribe links with invalid identifiers on…

I thought it was part of CAN SPAM that you can’t require a second action and that was why the big email sending providers moved to that.

You can require a second action such as clicking a button.

What you can't do is take them to a page that says "to unsubscribe, send a certified letter to our headquarters and wait 90 business days". The entire transaction must be completed at the page you link to.

Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders

#50

Post by 0xbadcafebee »

zitterbewegung wrote: post #4

Oh fun so basically no one will be able to setup their own email servers by themselves anymore. Antispam is killing the open internet now.

I mean... No? You can set up your own mail server all you want, it's just that few people will take your mail. Just make friends with other people who hate managed mail companies, you'll be able to email them just fine.
Post reply on HN